Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/D5C89D74F2DC11ECBD495473C4F9AE02.roa
File: D5C89D74F2DC11ECBD495473C4F9AE02.roa (raw, json)
Hash identifier: HUFkUPUZdnN8bGFsehv2ZrPPll4LEANXF/vZCHX5wZs=
Subject key identifier: A3:74:90:07:A6:C0:E9:BD:5D:A3:A2:AD:D8:AC:5C:3F:C7:C5:4F:23
Certificate issuer: /CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Certificate serial: F2
Authority key identifier: 02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/D5C89D74F2DC11ECBD495473C4F9AE02.roa
Signing time: Wed 03 Aug 2022 06:32:57 +0000
ROA not before: Wed 03 Aug 2022 06:32:57 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 131330
IP address blocks: 103.22.148.0/22 maxlen: 22
202.88.40.0/23 maxlen: 23
2400:1560::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 242 (0xf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BA5BA/serialNumber=02AA3A76C459497B1B45F26E9044ACC6F2E8044F
Validity
Not Before: Aug 3 06:32:57 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62ea1698-a18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:65:22:72:9b:45:51:4f:71:7c:70:c1:1e:
b6:2c:1b:97:84:ec:f6:96:30:15:d3:a1:6c:35:28:
c0:4f:5a:87:43:8f:fa:2b:1d:51:91:b4:0b:bb:56:
d0:df:13:7e:a1:95:f3:7d:1c:a1:21:3a:42:e7:10:
b9:f2:96:fd:cd:fd:d6:7a:f0:dd:2e:fd:99:1d:21:
34:f3:9b:6b:1d:88:11:68:b5:8a:10:91:24:48:1c:
07:77:cf:8b:bc:96:4e:ad:1c:29:20:e8:f1:b7:38:
fa:fa:5e:ae:0d:d1:68:26:bc:65:72:46:52:bd:85:
d0:44:d4:3f:10:ed:77:28:a7:8e:f2:c1:61:fe:41:
c9:dd:9e:0f:3b:81:86:39:1c:a9:22:c2:ce:90:34:
ae:df:de:3f:c5:47:a5:b8:78:15:37:60:ec:f9:ec:
96:9f:b6:0f:f4:63:00:cf:ab:f2:4c:2b:70:96:0f:
f4:e1:bc:34:7a:20:bc:97:47:8e:e6:22:35:e9:78:
37:a7:72:4d:c1:bc:a3:2d:39:4d:ed:fd:cb:40:79:
5d:0f:fd:41:80:1a:39:01:dd:4c:a4:5d:bd:d9:5a:
73:6b:97:34:6b:18:25:6e:96:1c:54:8d:d9:0c:c2:
71:ea:a9:5f:f8:cb:9f:19:0a:ba:ed:a2:bf:83:ea:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:74:90:07:A6:C0:E9:BD:5D:A3:A2:AD:D8:AC:5C:3F:C7:C5:4F:23
X509v3 Authority Key Identifier:
keyid:02:AA:3A:76:C4:59:49:7B:1B:45:F2:6E:90:44:AC:C6:F2:E8:04:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/Aqo6dsRZSXsbRfJukESsxvLoBE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aqo6dsRZSXsbRfJukESsxvLoBE8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA5BA/4326CBC0B7CD11ECAF681335C4F9AE02/D5C89D74F2DC11ECBD495473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.22.148.0/22
202.88.40.0/23
IPv6:
2400:1560::/32
Signature Algorithm: sha256WithRSAEncryption
00:15:7a:65:29:b7:8c:8e:23:06:5b:18:c0:17:ad:b2:28:83:
7d:14:e4:64:2d:bc:e1:98:e9:6c:74:ff:b5:45:a0:d9:c8:e7:
18:3f:e5:bc:09:ac:d6:9a:96:17:cb:c4:73:48:37:d0:06:6b:
59:ff:92:94:1f:7a:a3:ab:67:a1:b2:9e:93:1d:50:a0:2c:3f:
b1:9d:50:8c:43:1d:cb:09:8b:39:d5:cb:ac:f5:c2:78:53:88:
e6:90:ae:9e:a3:ba:2c:b7:39:71:ff:10:d4:35:4f:0a:fc:27:
e7:d1:34:8e:9a:e6:12:ac:34:4c:23:3b:75:c6:89:85:f6:83:
99:7c:a5:5b:6a:09:d8:ed:f6:e1:dd:2d:4b:f3:48:b9:a1:ee:
df:30:3f:ba:0a:ca:35:a4:90:8a:d9:29:8e:84:86:92:88:38:
91:83:ab:1c:6f:a8:69:7a:61:af:53:48:c4:88:88:11:c2:c6:
eb:f0:f2:73:1c:6b:92:4e:15:44:4a:e7:04:64:19:d7:26:16:
8e:a2:6f:d5:a7:30:39:d8:14:77:f1:e1:99:88:c3:a8:78:7a:
54:b6:2c:2e:84:7e:4d:14:d3:be:ca:e7:c9:d6:d0:5a:bd:f1:
e2:5f:22:f7:fb:7e:29:f5:16:8f:16:43:ba:58:0e:37:77:25:
bb:6c:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org